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Amendments to the Claims : 

The following listing of claims will replace all prior versions, and listings, of claims in 
the application: 

1 . (Currently Amended) An apparatus for processing a subject name included in 
a personal certificate, comprising: 

a receiving p art that receives a personal certificate; 

a verifying p art that verifies the received personal certificate based on a digital 
signature technique; 

a n extracting part that extracts at least one of predetermined elements in a hierarchy of 
a-subject name included in the received personal certificate; and 

a determination part that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the personal 
certificate is successfully verified, 

wherein the predetermined elements includes an element allocated for representing a 
project an el e ment allocated for representing a purpos e of op e ration to be operated by th e 
hold e r of th e p e rsonal c e rtificat e. 

2. (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 1, wherein the at least one of the predetermined elements is an 
organizational unit name of a predetermined hierarchy of the subject name. 

3. (Canceled) 

4. (Currently Amended) A web server computer system comprising: 
a receiving part that receives a personal certificate; 

a verifying part that verifies the received personal certificate based on a digital 
signature technique; 
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a n extracting part that extracts at least one of predetermined elements in a hi e rarchy of 
a subject name included in the received personal certificate; and 

a determination part that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the received 
personal certificate is successfully verified, 

wherein the predetermined elements include s an element allocated for representing a 
proiect an e l e ment allocat e d for r e pr e senting a purpos e of op e ration to b e operated by th e 
hold e r of th e p e rsonal c e rtificate . 

5. (Currently Amended) A web server computer system comprising: 

a receiving p art that receives a personal certificate; 

a verifying p art that verifies the received personal certificate based on a digital 
signature technique; 

an allocating part that allocates a session identifier when the received personal 
certificate is successfully verified; 

an extracting part that extracts at least one of predetermined elements in a hi e rarchy of 
a-subject name included in the received personal certificate; 

a determination p art that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the received 
personal certificate is successfully verified; and 

a memory p arHhat stores the determined access right associated with the session 
identifier, 

wherein the predetermined elements includes an element allocated for representing a 
proiect an el e m e nt allocat e d for repres e nting a purpose of op e ration to b e op e rat e d by th e 
holder of the p e rsonal c e rtificat e. 
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6. (Original) The web server computer system according to claim 5, wherein the 
at least one of the predetermined elements is an organizational unit name of a predetermined 
hierarchy of the subject name. 

7. (Canceled) 

8. (Currently Amended) An apparatus for processing a subject name included in 
a personal certificate, which r e c e ives a personal certificat e in which a pr e d e t e rmined elem e nt 
of a subject nam e repres e nts an organization to which a hold e r of the c e rtificate belongs and 
an attribut e oth e r than a p e rsonal ID so as to process th e subj e ct name, the apparatus 
comprising: 

a receiving part that receives the personal certificate; 

a n extracting part that extracts a predetermined element in a hi e rarchy of a subject 
name included in the received personal certificate; and 

a determination part that determines an access right at least based on an organization 
to which a holder belongs and an attribute other than a personal ID represented by a value of 
the predetermined element, 

wherein the predetermined element in a hi e rarchy of the subject name represents a 
project purpos e of operation to b e operated by the hold e r of th e personal c e rtificat e. 

9. (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 8, wherein the organizational unit name of a predetermined 
hierarchy of the subject name represents that the holder of the certificate is not a member of 
an organization represented by the organization name and that the holder cooperates with the 
organization. 

10. (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 8, wherein the organizational unit name of a predetermined 
hierarchy of the subject name represents a project name in which the holder takes part. 
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1 1 . (Original) The apparatus for processing a subject name included in a personal 
certificate according to claim 8, wherein the organizational unit name of a predetermined 
hierarchy of the subject name represents a cooperating organization name which cooperates 
with an organization represented by the organization name and to which the holder belongs. 

12. (Canceled) 

13. (Canceled) 

14. (Canceled) 

15. (Currently Amended) A method for processing a subject name included in a 
personal certificate, comprising th e st e ps of : 

receiving a personal certificate; 

verifying the received personal certificate based on a digital signature technique; 

extracting at least one of predetermined elements in a hi e rarchy of a subject name 
included in the received personal certificate; and 

determining an access right of a holder of the personal certificate based on a value of 
the at least one predetermined element when the personal certificate is successfully verified, 

wherein the predetermined elements includes an element allocated for representing a 
project an e lement allocated for repr e senting a purpose of op e ration to b e op e rat e d by th e 
hold e r of the personal c e rtificat e. 

16. (Currently Amended) A method for processing a subject name included in a 
personal certificate, which r e ceives a personal certificate in which a pr e d e termin e d e lem e nt of 
a subject nam e r e presents an organization to which a holder of the personal c e rtificat e b e longs 
and an attribut e other than a personal ID so as to proc e ss the subject name, the method 
comprising th e st e ps of : 

receiving the personal certificate; 
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extracting a predetermined element in a hierarchy of a subject name included in the 
received personal certificate; and 

determining an access right at least based on an organization to which a holder 
belongs and an attribute other than a personal ID represented by a value of the predetermined 
element, 

wherein the predetermined element in a hierarchy of the subject name represents a 
project purposo of operation to b e operat e d by th e hold e r of th e p e rsonal c e rtificat e. 

17. (Currently Amended) A storage medium readable by a computer, the storage 
medium storing a program of instructions executable by the computer to perform a function 
for processing a subject name included in a personal certificate, the function comprising the 
steps of: 

receiving a personal certificate; 

verifying the received personal certificate based on a digital signature technique; 

extracting at least one of predetermined elements in a hierarchy of a subject name 
included in the received personal certificate; and 

determining an access right of a holder of the personal certificate based on a value the 
at least one predetermined element when the personal certificate is successfully verified, 

wherein the predetermined elements includes an element allocated for representing a 
proiect an e l e m e nt allocated for repr e senting a purpos e of op e ration to b e op e rat e d by th e 
hold e r of th e p e rsonal certificat e. 

18. (Currently Amended) A storage medium readable by a computer, the storage 
medium storing a program of instructions executable by the computer to perform a function 
for processing a subject name included in a personal certificate, which r e ceiv e s a p e rsonal 
certificate in which a predetermined el e m e nt of a subj e ct name repr e s e nt s an organization to 
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which a holder of tho personal c e rtificate belongs and an attribute other than a personal ID go 
as to procosG the subject nam e , the function comprising th e st e pG of : 
receiving the personal certificate; 

extracting a predetermined element in a hierarchy of a subject name included in the 
received personal certificate; and 

determining an access right at least based on an organization to which a holder 
belongs and an attribute other than a personal ID represented by a value of the predetermined 
element, 

wherein the predetermined element in a hierarchy of the subject name represents a 
proiect p urposo of operation to be op e rat e d by the holder of th e p e rconal certificat e. 

19. (Canceled) 

20. (Currently Amended) An apparatus for processing a subject name included in 
a personal certificate, comprising: 

a receiving p art that receives a personal certificate; 

a verifying p art that verifies the received personal certificate based on a digital 
signature technique; 

an extracting part that extracts at least one of predetermined elements in a hierarchy of 
a subject name included in the received personal certificate; and 

a determination p art that determines an access right of a holder of the personal 
certificate based on a value of the at least one predetermined element when the personal 
certificate is successfully verified, 

wherein the predetermined elements includes an organizational unit name allocated 
for representing a project name and a common name allocated for representing a purpose of 
operation of the project. 



